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Remarks 

This Application has been carefully reviewed in light of the Final Office Action 
("Office Action") mailed electronically on May 26, 2010. Applicant appreciates the 
Examiner's consideration of the Application. Claims 1-24 are pending and stand rejected. 
Applicant respectfully requests reconsideration and allowance of all pending claims. 

Rejections under 35 U,S.C> S 103 

The Examiner rejects Claims 1-4, 7-10, 13-16, and 19-22 under 35 U.S.C. § 103(a) as 
being unpatentable over U.S. Patent No. 6,279,113 issued to Vaidya CVaidya") in view of 
U.S. Publication No. 20050037733 issued to Coleman et al. C'Colemarf'); Claims 5, 11, 17, 
and 23 stand rejected under 35 U.S.C. § 103(a) as being unpatentable over Vaidya in view of 
Coleman in view of U.S. Publication No. 2004/0172557 issued to Nakae et al. CNakae''); 
Claims 6, 12, 18, and 24 stand rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Vaidya in view of Coleman in view of Nakae in view of U.S. Patent No. 7,032,1 14 issued to 
Moran ("Moran''), Applicant respectfully traverses these rejections for at least the reasons 
discussed below. 

In order to establish a prima facie case of obviousness of a claimed invention, all 
claim limitations must be taught or suggested by the prior art. See M.P.E.P. § 2143. 
Claim 1 recites, in part: 

determining an initial system certainty value for the computer system; 
providing access to a database of signatures, each signature including a 
signature certainty value; 
receiving data; 

comparing the received data with the database of signatures; 

increasing the system certainty value if the received data does not 
match a signature in the database; 

decreasing the system certainty value if the received data matches a 
signature in the database; and 

filtering the data based on the system certainty value and the signature 
certainty value of a signature matching the received data. 

Applicant respectfully contends that the proposed Vaidya-Coleman combination fails 
to disclose, teach, or suggest every limitation of Claim 1. The Office Action states that 
Vaidya fails to explicitly disclose the limitations "determining an initial system certainty 
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value for the computer system/' "increasing the system certainty value if the received data 
does not match a signature in the database," and "decreasing the system certainty value if the 
received data matches a signatvire in the database." Office Action, pgs. 5-6. Instead, the 
Office Action relies on Coleman as disclosing or suggesting these limitations. Office Action, 
pgs. 5-8. 

Coleman discloses a method and system that "provides autonomous wireless intrusion 
detection and prevention, with minimal or no operator intervention." Coleman, Abstract. In 
rejecting these claims, the Office Action relies on the "mistrust level for each wireless 
network device" as reciting an initial system certainty value for the computer system. Office 
Action, pg. 5. Applicant respectfully disagrees. These mistrust levels correspond to 
individual levels associated with each wireless network device located within a computer 
system. There is no disclosure, teaching, or suggestion of a single initial system certainty 
value for the computer system . 

Furthermore, even if the Office Action's proposed mapping is correct (a point 
Applicant does not concede), Applicant respectfully contends that Coleman fails to disclose, 
teach, or suggest "increasing the system certainty value if the received data does not match a 
signature in the database" and "decreasing the system certainty value if the received data 
matches a signature in the database." While Coleman does disclose incrementing and 
decrementing the mistrust levels. Applicant respectfully contends that these changes are not 
based on either matching or not matching signatures. For instance, Coleman clearly states 
that "mistrust level decrementing is accomplished based on three parameters, described as 
follows: (1) a decrement timer Dl exceeds a mistrust level decrement interval from the 
operational protection suite; (2) mistrust level four has been reached, the wireless network 
device 36, 38 successfully re-authenticates, and re-login is also successful; (3) manual 
intervention 90 from the network administrator 92." Coleman, \ 0121. Therefore, the 
decrementing process disclosed in Coleman is based only on timing, manual intervention, or 
re-authentication. There is no disclosure, teaching, or suggestion that matching or not 
matching a signature plays any role in this step. 

In response to these arguments, the Office Action states "'matching signatures' 
specifically the 'signatures' can be any criteria that are deemed as an intrusion that is then 
matched or determined to be a known intrusion." Office Action, pg. 13. Without conceding 
this point. Applicants respectfully maintains that Coleman only discloses "decrementing" 
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based on the three criteria listed above. This fails to disclose a decrementing step based on 
"any criteria that are deemed as an intrusion that is then matched." Therefore, even under the 
Office Action's proposed "broadest" interpretation, this cited portion fails to disclose, teach, 
or suggest "decreasing the system certainty value if the received data matches a signature in 
the database." Accordingly, Applicant respectfully requests reconsideration and allowance of 
Claim 1. 

Claims 2-4 depend from Claim 1 and incorporate all the limitations thereof. As such. 
Applicant respectfully requests reconsideration and allowance of Claims 2-5 for at least the 
same reasons as Claim 1 . 

Similar to Claim 1, Claims 7, 13, and 19 include elements directed to "increasing the 
system certainty value if the received data does not match a signature in the database" and 
"decreasing the system certainty value if the received data matches a signature in the 
database." Thus, for at least the reasons discussed above with regard to Claim 1, Applicant 
respectfully requests reconsideration and allowance of Claims 7, 13, and 19. Claims 8-10 
depend from Claim 7 and incorporate all the limitations thereof. Claims 14-16 depend from 
Claim 13 and incorporate all the limitations thereof. Claims 20-22 depend from Claim 19 
and incorporate all the limitations thereof. As such. Applicant respectfully requests 
reconsideration and allowance of Claims 8-10, 14-16, and 20-22 be withdrawn. 

The Examiner also rejects Claims 5, 11, 17, and 23 under 35 U.S.C. § 103(a) as being 
unpatentable over Vaidya in view of Coleman, in view of U.S. Publication No. 20040172557 
issued to Nakae et al. Q'Nakae''), The Examiner also rejects Claims 6, 12, 18, and 24 under 
35 U.S.C. § 103(a) as being unpatentable over Vaidya in view of Coleman, in view of Nakae, 
and in view of U.S. Patent No. 70321 14 issued to Moran CMoran''). Applicant respectfully 
traverses these rejections for at least the reasons discussed below. 

In rejecting each of these dependent claims, the Office Action relies on the proposed 
Vaidya-Coleman combination to disclose each and every element of the base independent 
Claims 1,7, 13, and 19. As shown above, Applicant respectfully contends that this proposed 
combination fails to disclose, teach, or suggest every limitation of the independent base 
claims. The additional cited references fail to cure these deficiencies. As such, Applicant 
respectfully contends that Claims 5-6, 11-12, 17-18, and 23-24 are allowable over the cited 
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references. Accordingly, Applicant requests reconsideration and allowance of Claims 5-6, 
11-12, 17-18, and 23-24. 

No Waiver 

All of Applicant's arguments are without prejudice or disclaimer. By not responding 
to additional statements made by the Examiner, Applicant does not acquiesce to the 
Examiner's additional statements. The remarks discussed by Applicant are sufficient to 
overcome the Examiner' s rejections. 
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CONCLUSION 



Applicant has made an earnest attempt to place this case in condition for allowance. 
For the foregoing reasons, and for other apparent reasons, Applicant respectfully requests full 
allowance of all pending claims. 

Applicant believes that no fee is due. However, the Commissioner is hereby 
authorized to charge any fee or credit any overpayment to Deposit Account No. 02-0384 of 
BAKER BOTTS L.L.P. 

If the Examiner believes a telephone conference would advance prosecution of this 
case in any way, the Examiner is invited to contact Luke K. Pedersen, Attomey for 
Applicant, at the Examiner's convenience at (214) 953-6655. 



Respectfully submitted. 




BAKER BOTTS L.L.P. 
AttQ3|^!^\for Applicant 
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